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CLAIMS 

WHAT IS CLAIMED: 

1 . A method of communicating with a first computing device, said method 
comprising the acts of: 

encrypting information destined for said first computing device; 
creating an HTTP request which includes an address of said first device 
and the eii^rypted information; and 

transmitting said HTTP request to a second computing device different 
1 0 from said first Computing device. 

2. Tnkmethod of claim 1, wherein said HTTP request comprises a POST 
request, and wherein said encrypted information is included in the body of said POST request. 

15 3. The methoo^f claim 1, wherein said HTTP request comprises a GET 

request, and wherein said encryfcjed information is appended to said GET request as a 
parameter. 

4. The method of claim K wherein said information is encrypted using a 
20 symmetric key, and wherein said symmetric key is a shared secret available to said first 

computing device and not available to said sebond computing device. 

5. The method of claim 1, further comprising the act of creating a web page 
which includes a hyperlink associated with said HTTPvrequest, wherein said transmitting act 

25 comprises transmitting said web page to said second computing device. 



6. The method of claim 1, wherein said second\x>mputing device is associated 
with a purchaser of content, wherein said first computing deviceVrovides said content, and 
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^herein the encrypted information includes information relating to the purchase of said 
content. 

7. The method of claim 6, wherein the encrypted information includes 
5 information which identifies said purchaser. 



iii 



timestamp. 



10 



v8. The method of claim 1, wherein the encrypted information includes a 



9. Tnfe method of claim 1, further comprising the acts of: 

computing a hash of said information prior to encryption; and 
including said hash in said HTTP request. 



fy 15 algorithm. 



10. The method of claim 9, wherein said hash is computed using an SHA1 



1 1 . A computer readable medium having computer-executable instructions to 
perform the method of claim 1 . 



20 12. A method of communicating with a first computing device through a 

second computing device, said method comprising the acts of: 

encrypting information such that the encrypted information is 
decryptable by a secret; 

transmitting the encrypted information to said second computing 
25 device, said encrypted information being transmittoble\osaid first computing device upon 
instruction from a user operating said second computing device, wherein said secret is not 
accessible to either said second computing device or said user; and 

sharing said secret by performing eitheiW the following acts: 
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\ providing said secret to said first computing device or to a party 

associate! with said first computing device; or 

\ receiving said secret from said first computing device or from a 

party associated with said first computing device. 
5 \ 

13NThe method of claim 12, wherein said first computing device is associated 
with a purchaser of content, and wherein said second computing device provides said content. 

14. Thei^thod of claim 13, wherein the encrypted information includes 
10 information relating to the purchase of said content. 



15. The method of claim 12, wherein said transmitting act comprises 
transmitting the encrypted information over a wide-area network. 



15 16. The method of clairn 15, wherein said wide-area network comprises the 

Internet. 



17. The method of claim 12, wherein said transmitting act comprises 
transmitting to said second computing device arKHTTP request which includes an address of 
20 said first computing device and the encrypted information. 



18. The method of claim 17, wherein safd HTTP request comprises a POST 
request, and wherein said encrypted information is included in the body of said POST request. 



25 19. The method of claim 17, wherein said HTT^request comprises a GET 

request, and wherein said encrypted information is appended to said GET request as a 
parameter. 
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20. The method of claim 17, further comprising the act of creating a web page 
which includes a link associated with said HTTP request, wherein said transmitting act 
comprising transmitting said web page to said second computing device, and wherein the user 
instruction to transmit the encrypted information to said first computing device comprises the 

5 user using^an input device associated with said second computing device to actuate said link. 

21. The method of claim 12, wherein said secret comprises a symmetric key, 
and wherein saie^encrypting act comprises encrypting said information with said symmetric 
key. 



10 



22. The method of claim 12, further comprising the act of including a 
timestamp in the encrypted information. 



w 

--a 

D 



23. The method©f claim 12, further comprising the act of appending a hash of 
15 said information to said encrypted\[nformation, said hash being computed prior to encryption 
of said information. 



20 



of: 



24. A method of facilitating electronic content distribution comprising the acts 



providing, to a first partV for use on a first computing device, a first set 



of computer-executable instructions which encrypts information based on a unique id that 
maps into a shared secret, the encrypted information\being includable in an HTTP request 
which includes a network address of a second computing device; and 

providing, to a second party for use^n said second computing device, a 
25 second set of computer-executable instructions which decrypts the encrypted information. 



25. The method of claim 24, wherein said first party^comprises a seller of 
electronic content, wherein said second party comprises a provider oRelectronic content sold 
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by\ >aid first party, and wherein said encrypted information relates to a transaction between 
said t^rst party and a consumer of electronic content. 

26. The method of claim 24, wherein said HTTP request comprises a POST 
request, and wherein said encrypted information is included in the body of said POST request. 




\27. The method of claim 24, wherein said HTTP request comprises a GET 
request, and whef ein said encrypted information is appended to said GET request as a 
parameter. 



28. The method of claim 24, wherein said first set of computer-executable 
instructions comprises aoCOM object. 



29. The method of claim 28, wherein said first set of computer-executable 
instructions exposes an ENCRYPT method for use by a third set of computer-executable 
instruction which runs on said firk computing device. 

30. The method of claim 24, wherein a secret symmetric key is accessible to or 
known by each of said first computing device and said second computing device, and wherein 
said first set of computer-executable instructions uses said secret symmetric key to encrypt 
said information. 




31. The method of claim 24, wherein said information includes information 
identifying an item of content which said second computing device provides. 



32. The method of claim 24, wherein said\information includes information 
identifying a purchaser of an item of content. 
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33. A method of building a client-server request, said method comprising the 

acts of 

encrypting first information so as to be decryptable by a secret 
accessible td\a first server; 
5 \ including an address associated with said first server in said client- 

server request; 

including the encrypted information in said client-server request. 



34. The method of claim 33, wherein the encrypted information includes 
10 information relating to a transaction to purchase a content item, wherein said first server 
furthers at least some aspect of said transaction. 



15 



35. The method of Maim 34, wherein the encrypted information includes 
information which identifies a purchaser of said content item. 

36. The method of claim 3\ wherein the encrypted information includes 
information which identifies said content itefc 



37. The method of claim 34, wherein the encrypted information includes a 

20 timestamp. 

38. The method of claim 34, wherein sai^first server provides said content 

item. 

25 39. The method of claim 33, wherein said secretVomprises a symmetric key, 

and wherein the encrypted information is generated by encryptingspleartext information with 
said symmetric key. 
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40. The method of claim 33, wherein said client-server request comprises an 

HTTP rbquest. 

\41 . The method of claim 40, wherein said HTTP request comprises a POST 
request, and wherein the encrypted information is included in the body of said POST request. 

42. The method of claim 40, wherein said HTTP request comprises a GET 
request, and wherein tnb^encrypted information is appended to said GET request as a 
parameter. 

43. A computepjeadable medium having computer-executable instructions to 
perform the method of claim 33. 

44. A method of distributing electronic content, said method comprising the 

acts of: 

receiving, at a firs\computing device from a second computing device, 
an order for a content item; and 

providing, from said fi^st computing device to said second computing 
device, data comprising: 

a network address \>f a third computing device; and 

encrypted information; 
wherein said third computing device processes said o^der by using at least some of said 
encrypted information. 

45. The method of claim 44, wherein said data comprises an HTTP POST 
request, and wherein said encrypted information is included in the body of said POST request. 



46. The method of claim 44, wherein said data comprises an HTTP GET 



request. 



# • 
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47. The method claim 44, wherein said encrypted information includes 
information Identifying said content item. 

48\The method of claim 44, wherein said encrypted information includes 
information identifying the individual who issued said order for said content item. 

49. The njethod of claim 44, wherein said encrypted information includes a 

timestamp. 

50. The methoid of claim 44, wherein said data further comprises a hash of said 
encrypted information, said hash being computed prior to encryption of said information. 

51 . The method of claim 50, wherein said hash is computed using an SHA1 

algorithm. 

52. The method of claim \4, wherein said content item does not reside on said 
first computing device. 

53. A computer-readable mediupi having computer-executable instructions to 
perform the method of claim 44. 

54. A computer-readable medium having computer-executable instructions for 
performing steps comprising: \ 

receiving parameters that identify characteristics of a first transaction 
between a first client and a first server; \^ 

encrypting one or more of said parameters; 



# • 
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returning said encrypted parameters to said first client in a format such 
that a second server may receive said encrypted parameters from said first client, validate said 
first transaction, and initiate a second transaction without any interaction with said first server. 



5 \55. The computer-readable medium of claim 54, wherein said computer- 

executable instructions comprise a COM object. 

56. The computer-readable medium of claim 54, wherein said first transaction 
jj relates to the sale of electronic content. 

I 10 

57. The computer-readable medium of claim 56, wherein said second 
transaction comprises downloading said electronic content from said second server to said 

^ first client. \ 

S \ 

dj 1 5 58. The computer-readable medium of claim 56, wherein said parameters 



comprise end-use information that enables the individualization of said electronic content. 

v ■ 

59. The computer-readable medium of claim 54, wherein said parameters 
include one or more of the following: information identifying a party to said first transaction, 

20 and information identifying an item purchased inWd first transaction. 

60. The computer-readable medium of\claim 54, wherein said steps further 
comprise including a timestamp in said encrypted parameters. 



25 61 . The computer-readable medium of clainA54, wherein said steps further 

comprise computing a hash of at least sonie of said encrypted parameters. 



62. The computer-readable medium of claim 61, wherein said hash is 
computed using an SHA1 algorithm. 



# • 
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63>^he computer-readable medium of claim 54, wherein said encrypting act 
comprises applying a se^re^symmetric key shared between said first server and said second 
server. 

64. The computer-readable medium of claim 54, wherein said format 
comprises an HTTP request including an address of said first server. 



Si 
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